gecko-dev/dom/bindings/crashtests/869038.html
Peter Van der Beken 3e22fefe23 Bug 869038 - Clear expando object the right way. r=bz.
--HG--
extra : rebase_source : c75c0ac7b07bbe9396f1b77b34c1e34575078a49
2013-05-08 09:20:13 +02:00

23 lines
415 B
HTML

<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<script>
function boom()
{
var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
document.body.appendChild(frame);
var frameDoc = frame.contentDocument;
frameDoc.contentEditable = "true";
document.body.removeChild(frame);
SpecialPowers.gc();
frameDoc.focus();
}
</script>
</head>
<body onload="boom();"></body>
</html>